Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
File:                     3ye5OZNKLMIG_7przpyQ_cujnHE.cer (raw, json)
Hash identifier:          dB5ZVplKE+iQc/IbwGonhw1zqhYCsgsvWCiboAymnH0=
Subject key identifier:   DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942825E66F0C8C15CECC09F1ADBA5FE97E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:52:40 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 58331
                          IP: 185.75.204.0/22
                          IP: 193.242.194.0/23
                          IP: 2a05:5440::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:25:e6:6f:0c:8c:15:ce:cc:09:f1:ad:ba:5f:e9:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:52:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8c:4b:cd:65:8d:f6:c6:f9:a9:a5:eb:42:04:
                    03:60:0b:a7:a6:7b:7a:e0:d2:d8:56:c4:b8:4e:23:
                    d9:cb:bd:44:d7:9e:f3:67:30:2c:45:31:82:29:bb:
                    38:73:6d:7a:be:c3:3b:e5:a5:69:5a:6c:b4:f9:6b:
                    17:6e:fc:b7:e1:6f:9e:0a:a3:44:3e:49:ea:3c:88:
                    95:ff:15:6a:04:28:fd:cb:54:f0:c0:c8:d3:ce:90:
                    cd:83:42:b8:fe:02:f9:1d:1d:86:e8:e8:5c:fc:8e:
                    f9:b8:29:f6:58:55:98:28:d4:a8:b5:08:30:c0:fc:
                    6d:2f:6a:01:9c:40:ac:93:1b:33:9d:7a:46:83:a4:
                    18:0c:e5:83:ab:c3:88:0b:51:68:38:cc:3b:11:7b:
                    1d:ab:2c:8c:df:30:3f:9a:91:cf:cb:ba:29:d7:ee:
                    12:65:fa:b0:d1:94:09:e9:b6:bd:79:aa:86:cb:fe:
                    3e:a8:09:5b:17:a8:ca:8f:51:ed:27:1e:85:ab:5e:
                    8e:4c:82:52:5b:c5:d5:5e:6a:d8:c9:c5:df:ce:a6:
                    d8:ba:cf:12:62:b0:19:da:31:db:1f:00:0b:79:2f:
                    49:a5:c7:8b:11:2b:ff:4d:cb:cd:b4:eb:e1:6e:6c:
                    4b:24:32:cd:1a:df:a6:22:30:d3:4d:ae:66:f8:00:
                    b0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.75.204.0/22
                  193.242.194.0/23
                IPv6:
                  2a05:5440::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58331

    Signature Algorithm: sha256WithRSAEncryption
         60:95:1d:43:53:8e:77:1c:1a:b8:95:77:5d:1e:75:7a:35:84:
         12:5e:b5:ac:18:7f:70:8a:55:da:b8:f0:8b:67:1a:2d:04:14:
         d0:69:e8:08:66:01:34:b0:3d:bb:88:9a:be:27:e6:a6:7b:dc:
         41:13:40:8f:e5:f4:b0:fb:52:17:f6:80:5e:4f:df:67:ec:8b:
         1a:3c:8f:24:7a:4e:32:58:4d:89:88:c0:f2:ba:e6:db:ee:98:
         1f:89:ce:cd:e0:2f:d3:76:e1:f0:ab:2f:d5:50:2a:be:07:57:
         5e:1e:08:45:14:46:d1:06:c9:0d:d6:dd:73:26:69:19:87:26:
         50:e7:90:20:09:55:0f:fa:d0:95:47:90:b5:f9:ed:4a:15:96:
         29:4c:0d:bd:74:ef:20:c8:c0:d7:c5:92:35:2e:a3:00:11:da:
         9d:ca:34:4e:7f:ac:4f:da:14:b4:74:b3:30:c6:cc:5a:26:99:
         35:b8:69:c5:8d:30:ca:b5:cd:b0:d0:23:fa:c0:0c:d3:59:c6:
         35:5e:ef:2f:94:47:ca:18:18:4e:78:90:84:73:e6:5d:8e:6f:
         f2:12:74:bd:aa:97:dc:83:27:5a:e9:3e:b8:f0:ee:11:7c:1d:
         79:63:eb:73:48:f1:02:41:c4:b2:df:ec:f0:24:b9:ed:b8:46:
         a7:db:6d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----